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Abstract 

The deterministic network calculus offers an elegant framework for determining delays and backlog 
in a network with deterministic service guarantees to individual traffic flows. This paper addresses the 
problem of extending the network calculus to a probabilistic framework with statistical service guaran- 
tees. Here, the key difficulty relates to expressing, in a statistical setting, an end-to-end (network) service 
curve as a concatenation of per-node service curves. The notion of an effective service curve is developed 
as a probabilistic bound on the service received by an individual flow. It is shown that per-node effective 
service curves can be concatenated to yield a network effective service curve. 
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1 Introduction 

The deterministic network calculus recently evolved as a fundamental theory for quality of service (QoS) 
networks, and has provided powerful tools for reasoning about delay and backlog in a network with service 



guarantees to individual traffic flows. Using the notion of arrival envelopes and service curves [12], several 
recent works have shown that delay and backlog bounds can be concisely expressed in a min-plus algebra 

111]. 

However, the deterministic view of traffic generally overestimates the actual resource requirements of a 
flow and results in a low utilization of available network resources. This motivates the search for a statistical 
network calculus that can exploit statistical multiplexing, while preserving the algebraic aspects of the deter- 
ministic calculus. The problem of developing a probabilistic network calculus has been the subject of several 
studies. Kurose [ |l6| ] uses the concept of stochastic ordering and obtains bounds on the distribution of delay 
and buffer occupancy of a flow in a network with FIFO scheduling. Chang [Q] presents probabilistic bounds 
on output burstiness, backlog and delays in a network where the moment generating functions of arrivals 
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are exponentially bounded. Different bounds for stochastically bounded arrivals are derived by Yaron and 
Sidi [22] and Starobinski and Sidi [p]]. The above results can be used to determine stochastic end-to-end 
performance bounds. Results on statistical end-to-end delay guarantees in a network have been obtained for 
specific scheduling algorithms, such as EDF [19, [2C| ], and GPS [15], and a class of coordinated scheduling 
algorithms 17]. Several researchers have considered probabilistic formulations of service curves. Cruz 
defines a probabilistic service curve which violates a given deterministic service curve according to a certain 
distribution []l3|]. Chang (see [§], Chp. 7) presents exercises which hint at a statistical network calculus for 
the class of 'dynamic F-servers'. Finally, Knightly and Qiu [18] derive 'statistical service envelopes' as 
time-invariant lower bounds on the service received by an aggregate of flows. 

With exception of ([P], Chp. 7), none of the cited works express statistical end-to-end performance 
bounds in a min-plus algebra, and it has been an open question whether a statistical network calculus can be 
developed in this setting. The contribution of this paper is the presentation of a statistical network calculus 
that uses the min-plus algebra [JT], |5| ^J. The advantage of using the min-plus algebra is that end-to-end 
guarantees can be expressed as a simple concatenation of single node guarantees, which, in turn, can be 
exploited to achieve simple probabilistic bounds. 

We define an effective service curve, which is, with high certainty, a probabilistic bound on the service 
received by a single flow. We will show that the main results of the deterministic network calculus carry 
over to the statistical framework we present. Our derivations reveal a difficulty that occurs when calculating 
probabilistic service guarantees for multiple nodes. We show that the problem can be overcome either by 
adding assumptions on the traffic at nodes or by modifying the definition of the effective service curve. The 
results in this paper are set in a continuous time model with fluid left-continuous traffic arrival functions, 
as is common for network delay analysis in the deterministic network calculus. A node represents a router 
(or switch) in a network. Packetization delays and other effects of discrete-sized packets, such as the non- 
preemption of packet transmission, are ignored. We refer to [j|] for the issues involved in relaxing these 
assumptions for the analysis of packet networks. When analyzing delays in a network, all processing over- 
head and propagation delays are ignored. As in the deterministic network calculus, arrivals from a traffic 
flow to the network satisfy deterministic upper bounds, which are enforced by a deterministic regulator. 

The remaining sections of this paper are structured as follows. In Section ^[ we review the notation and 
key results of the deterministic network calculus. In Section |3| we introduce effective service curves and 
present the results for a statistical network calculus in terms of effective service curves. In Section ^| we 
provide a discussion that motivates our revised definition of an effective service curve. In Section |5| we 
present brief conclusions. 



2 Network Calculus Preliminaries 

The deterministic network calculus, which was created in JTo| , |Tij ] and fully developed in the last decade, 
provides concise expressions for upper bounds on the backlog and delay experienced by an individual flow 
at one or more network nodes. An attractive feature of the network calculus is that end-to-end bounds can 
often be easily obtained from manipulations of the per-node bounds. 

In this section we review some notation and results from the deterministic network calculus. This section 
is not a comprehensive summary of the network calculus and we refer to [JTJ, ^, [J for a complete discussion. 
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2.1 Operators 

Much of the formal framework of the network calculus can be elegantly expressed in a min-plus algebra 
complete with convolution and deconvolution operators for functions. Generally, the functions in this paper 
are non-negative, non-decreasing, and left-continuous, defined over time intervals [0,t]. We assume for a 
given function / that f(t) = if t < 0. 

The convolution f * g of two functions / and g, is defined as 

f*g(t) = inf {f( t -r)+g(r)} . (1) 

T£[0,t] 

The deconvolution f g of two functions / and g is defined as 

f0g(t) = SU p{f(t + r)-g(T)} . (2) 

T>0 

For t > 0, the impulse function 5 T is defined as 

Sr(f) = { °° ' ift>T ' (3) 

TW | , if t < t . 

If / is nondecreasing, we have the formulas 

f(t-r) = f*S T (t), (4) 
f(t + r) = f0S T (t). (5) 

We refer to [||, |(| ^ for a detailed discussion of the properties of the min-plus algebra and the properties 
of the convolution and deconvolution operators. 



2.2 Arrival functions and Service Curves 

Let us consider the traffic arrivals to a single network node. The arrivals of a flow in the time interval [0, t) 
are given in terms of a function A(t). The departures of a flow from the node in the time interval [0, t) are 
denoted by D(t), with D(t) < A(t). The backlog of a flow at time t, denoted by B(t), is given by 

B(t) = A(t) - D(t) . (6) 

The delay at time t, denoted as W(t), is the delay experienced by an arrival which departs at time t, given 
by 

W(t) = inf {d > 0| A(t-d) < D(t)} . (7) 

We will use A(x,y) and D(x,y) to denote the arrivals and departures in the time interval [x,y), with 
A(x, y) = A{y) - A(x) and D(x, y) = D{y) - D(x). 

We make the following assumptions on the arrival functions. 

(Al) Non-Negativity. The arrivals in any interval of time are non-negative. That is, for any x < y, we have 

A(y)-A(x) >0. 
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(A2) Upper Bound. The arrivals A of a flow are bounded by a subadditive^ function A*, called the arrival 
envelope^ such that A(t + r) - A(t) < A*(r) for all t,T > 0. 

A minimum service curve for a flow is a function 5 which specifies a lower bound on the service given 
to the flow such that, for alH > 0, 

D{t) > A * S{t) . (8) 

A maximum service curve for a flow is a function S which specifies an upper bound on the service given 
to a flow such that, for all t > 0, 

D(t) < A*S(t) . (9) 

Minimum service curves play a larger role in the network calculus since they provide service guarantees. 
Therefore, we, as the related literature, often refer to a minimum service curve simply as a service curve. If 
no maximum service curve is explicitly given, one can use S(t) = Ct, where C is the link capacity. 

The following two theorems summarize some key results of the deterministic network calculus. These 
results have been derived in [JTl BL pj]. We follow the notation used in 

Theorem 1 Deterministic Calculus ^, Sj. Given a flow with arrival envelope A* and with minimum 
service curve S, the following hold: 

1. Output Envelope. The function D* = A* S is an envelope for the departures, in the sense that, for 
all t,r>0, 

D*{t)>D{t + T)-D{r). (10) 

2. Backlog Bound. An upper bound for the backlog, denoted by b max , is given by 

bmax = A* 5(0) . (11) 

3. Delay Bound. An upper bound for the delay, denoted by d max , is given by 

d max = inf {d > | Vt > : A*(t - d) < S(t)} . (12) 

The next theorem states that the service curves of a flow at the nodes on its route can be concatenated to 
define a network service curve, which expresses service guarantees offered to the flow by the network as a 
whole. 

Theorem 2 Concatenation of Deterministic Network Service Curves [J, §, @|. Suppose a flow passes 
through H nodes in series, as shown in Figure |7J and suppose the flow is offered minimum and maximum 
service curves S h and S , respectively, at each node h = 1, . . . , H. Then, the sequence of nodes provides 
minimum and maximum service curves S net and S , which are given by 

S net = S 1 *S 2 *...*S H , (13) 
T et = S 1 *S 2 * ...*S H . (14) 

'A function / is subadditive if f(x + y) < f(x) + f{y), for all x, y > 0, or, equivalently, if fit) — f * f(t). 
2 A function E is called an envelope for a function / if f(t + r) — f(r) < E(t) for all t, t > 0, or, equivalently, if 
f(t) < E* /(t), for all f > 0. 
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Fi gure 1 ! Traffic of a flow through a set of H nodes. Let A h and D h denote the arrival and departures at the h-th node, with 
A 1 = A,A h = D h ' x for h = 2, . . . , H and D H = D. 



gnet an( j g ne ^ e re f erre( j t as network service curves, and Eqs. (|l3|)-(^4|) will be called the concate- 
nation formulas. 

With Theorems |] and ^| network service curves can be used to determine bounds on delay and backlog 
for individual flows in a network. There are many additional properties and refinements that have been 
derived for the deterministic calculus. However, in this paper we will concern ourselves only with the 
results above. 



3 Statistical Network Calculus 

We now approach the network calculus in a probabilistic framework. Arrivals and departures from a flow 
to the network in the time interval [0, t) are described by random processes A(t) and D(t) satisfying as- 
sumptions (Al) and (A2). The random processes are defined over an underlying joint probability space that 
we suppress in our notation. The statistical network calculus makes service guarantees for individual flows, 
where each flow is allocated a probabilistic service in the form of an 'effective service curve'. 

Given a flow with arrival process A, a (minimum) effective service curve is a nonnegative function S e 
that satisfies for all t > 0, 

Pr{D(t) > A*S £ (t)} > 1 -e . (15) 

Note that the effective service curve is a non-random function. We omit the corresponding definition of 
a maximum effective service curve. 

The following theorem is a probabilistic counterpart to Theorem [!]. 

Theorem 3 Statistical Calculus. Given a flow with arrival process A satisfying assumptions (A1)-(A2), 
and given an effective service curve S £ , the following hold: 

1. Output Envelope. The function A* S e is a probabilistic bound for the departures on [0, t], in the 

sense that, for all t,T > 0, 

Pr {D(t, t + t) < A* S £ (t)} > 1 — e . (16) 



2. Backlog Bound. A probabilistic bound for the backlog is given by b max = A* S £ (0), in the sense 
that, for all t > 0, 

Pr{B{t) < b max } > l-e. (17) 
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3. Delay Bound. A probabilistic bound for the delay is given by, 

dmax = mf {d > | Vt > : A*(t - d) < S £ (t)} , (18) 
in the sense that, for all t > 0, 

Pr{W{t) <d max }>l-e . (19) 

By setting s = in Theorem we can recover the bounds of Theorem [j] with probability one. 
Proof. The proof uses on several occasions that the inequality 

A(t + t) - A * g(t) <A*0 g(r) (20) 

holds for any nonnegative function g and for all t, r > 0. To see this inequality, we compute 

A(t + r) - A * g(t) = A(t + r) - inf {A(t - x) + g(x)\ (21) 

x€[0,t] 

= sup {A(t- x,t + r) -g(x)} (22) 

xe[o,t] 

< sup{A*(r + x) -g{x)} (23) 

= A*0 9 (t). (24) 

Eqn. ( ^Ij ) expands the convolution operator. Eqn. ( [22] ) takes ^4(t + r) inside the infimum and uses that 
A(t + t) - A(t - x) = A(t - x,t + r). Eqn. (||) uses that A(t - x, t + r) < + r) for all x < t 
by definition of an arrival envelope, and extends the range of the supremum. Finally, Eqn. ( |24"| ) uses the 
definition of the deconvolution operator. 

1. Proof of the Output Bound. For any fixed t, r > 0, we have 

l-e < Pr{D(t)>A*S £ {t)} (25) 

= Pr{D(t,t + r) < D(t + r) - A*S e {t)} (26) 

< Pr{D(t,t + r) < A(t + r) - A*S £ (t)} (27) 

< Pr {D(t, t + t) < A* S £ (t)} . (28) 



Eqn. ( |25| ) holds by the definition of the effective service curve S £ . Eqn. (26) uses that D(t,t + r) = 
-D(£ + t) — -D(i). Eqn. ($n\) uses that departures in [0, t) cannot exceed arrivals, that is, D(t) < A(t) for all 
t > 0. Finally, Eqn. @ uses that A(t + r)- A* S £ {t) < A* 5 £ (r) by Eqn. @. 

2. Proof of the Backlog Bound. Since £?(£) = A(t) — D(t) and with the definition of the effective service 
curve, we can write 

l-e < Pr{D(t) > A*S £ (t)} (29) 
= Pr{B{t) < A(t) -A*S £ (t)} (30) 
< Pr{B(t) < A* 5 e (0)} . (31) 

Eqn. ( |2"9| ) holds by definition of the effective service curve. Eqn. © uses that B(t) = A(t) — D(t), and 
Eqn. © uses that A(t) - A * S £ (t) < A* S e (0) by Eqn. @. 
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3. Proof of the Delay Bound. The delay bound is proven by estimating the probability that the output D(t) 
exceeds the arrivals A(t — d max ). 



1 



e < Pr{D(t)>A*S e (t)} 

< Pr{D(t)>A*(A**5 dmax )(t)} 

< Pr{D(t)>(A*A*)*5 dmax )(t)} 

< Pr{D(t) > A(t-d max )} . 



(32) 
(33) 
(34) 
(35) 



Eqn. ( ft2| ) uses the definition of the effective service curve S £ . Eqn. < J33| ) uses the definition of the impulse 
function in Eqn. (Q) and the definition of d m ax in Eqn. (|TJ). Eqn. (|4|) follows from the associativity of the 



convolution, and Eqn. (34) uses the definition of an arrival envelope. 



□ 



A probabilistic counterpart to Theorem ||can be formulated as follows. 

Theorem 4 Concatenation of Effective Service Curves. Consider a flow that passes through H network 
nodes in series, as shown in Figure |7J Assume that effective service curves are given by nondecreasing 
functions S h,£ at each node (h= 1,...,H). Then, for any t > 0, 

Pr{D(t)>A*(S^*...*S H ' e *6 (H _ 1)a )(t)}>l-e(l + (H-l)^ , (36) 

where a > is an arbitrary parameter. 

Again, we can can recover the deterministic result from Theorem ||. By setting e = 0, the results in 
Eqn. (p6|) hold with probability one. Then by letting a — > 0, we obtain Theorem || almost surely. 

Proof. We proceed in three steps. In the first step, we modify the effective service curve to give lower 
bounds on the departures simultaneously for all times in the entire interval [0, £]. In the second step, we 
perform a deterministic calculation. The proof concludes with a simple probabilistic estimate. 

Step 1: Uniform probabilistic bound on [0, t). Suppose that S e is a nondecreasing effective service curve, 
that is 

Vx6[0,t]: Pr{D(x) > A*S e (x)} > 1 -e . (37) 
We will show that then, for any choice of a > 0, 

Pr{\/x e [0, t] : D{x) > A * S £ (x - a)} > 1 - e- . (38) 

To see this, fix a > 0, set Xj = ja, and consider the events 

E j = {D(x j )>A*S e (x j )}, j = l,...,n-l, (39) 

where n = \i/a \ is the smallest integer no larger than t/a. Let x G [0, f] be arbitrary, and let j the largest 
integer with Xj < x, so that x — Xj < a. If Ej occurs, then 

D(x) > D(xj) >A* S e {xj) > A* S e {x - a) , (40) 
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where we have used the fact that S £ is nondecreasing in the last step. It follows that 

Pr{Vx € [0,t] : D(x) > A*S £ {x -a)} > Pr{Vj = 1, . . . , n : D(x 5 ) > A * S e (xj)} (41) 

(43) 



0<j<n 

> 1 — ne 



which proves Eqn. (|38|). Thus, the assumptions of the theorem imply that 

' Vx e [0, t] : D h (x) > A h * S h > £ * 5 ( x) , h < H " 



Pr 



D H (t) >A h *S H > £ (t) , 



h = H >l-^l + (H-l) ; 



(44) 



Sfe/? 2: A deterministic argument. Suppose that, for a particular sample path, 

fVxG[0,t]: > A h *S h ' £ *5 { x) , < H , 



(45) 



Inserting the first line of Eqn. ( |45[ ) with h = H — 1 into the second line yields 

£> H (i) > inf f inf {A H -\t - x - y) + (S H ~ l > £ * tf ) (y)} + S H > £ (x)\ (46) 
xe[o,t] >-ve[o,x] ) 

= A * (S H ~ l > £ * S H ' £ * 5 a ) (t) . (47) 
An induction over the number of nodes shows that Eqn. (45) implies that A = A 1 and D = D h satisfy 

D(t) > A * (S^ £ * ... * S H > £ * * (H _ 1)a ) (t) . (48) 



Step 3: Conclusion. We estimate 



Pr{D(t) > A * (S l > £ * ... * S H > £ * 6 {H ^ a )(t) } 
> Pr{ Eqn. (45) is satisfied } 



>l-e l + (H-l)e- 
1 a 



(49) 
(50) 

(51) 



The first inequality follows from the fact that Eqn. ( |45| ) implies Eqn. (|48|). The second inequality merely 
uses Eqn. (Q. □ 



Since the bound in Eqn. ( |36[ ) deteriorates as t becomes large, Theorem |4J is of limited practical value. 
To explain why Eqn. (36) deteriorates, consider a network as shown in Figure [T), with H = 2 nodes. An 



effective service curve S 2,£ in the sense of Eqn. (15) at the second node guarantees that, for any given time 
t, the departures from this node are with high probability bounded below by 



D 2 (t) > A 2 * S 2 ' £ {t) = inf { A 2 (t - t) + S 2 ' £ (t)\ . 

T£[0,t] 



(52) 



Suppose that the infimum in Eqn. (|52j) is assumed at some value f < t. Since the departures from the first 
node are random, even if the arrivals to the first node satisfy the deterministic bound A* , f is a random 
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variable. An effective service curve S l ' £ at the first node guarantees that for any arbitrary but fixed time x, 
the arrivals A 2 (x) = D l {x) to the second node are with high probability bounded below by 

D 1 {x)>A 1 *S l > £ {x). (53) 



Since f is a random variable, we cannot simply evaluate Eqn. (53) for x = t — f and use the resulting bound 



in Eqn. (52). Furthermore, there is, a priori, no time-independent bound on the distribution of f. Note that 
the above issue does not arise in the deterministic calculus, since deterministic service curves make service 
guarantees that hold for all values of x. 

We conclude that, in a probabilistic setting, additional assumptions are required to establish time- 
independent bounds on the range of the infimum, and, in that way, obtain probabilistic network service 
curves that do not deteriorate with time. One example of such an assumption is to add the condition that 

Pr<D(t)> inf \A(t- x) + S £ (x)}\ > 1-e. (54) 

[ XE[0,T] 1 ) 

This condition imposes a limit on the range of the convolution. The condition can be satisfied for a given ef- 
fective service curve S £ and arrival envelope A* by choosing T such that A*(T) < S e (T), which guarantees 
that 

A*S £ (t)= inf \A(t-x) + S £ (x)\ . (55) 
xe[o,T] L ' 

Theorem 5 Assume that all hypotheses of Theorem § are satisfied, and additionally, that there exists a 
number T > such that A h and S h ' e satisfy Eqn. ( 54 ) for h = 1, . . . , H. Then, for any choice of a > 0, 



S net,e> = S 1 '* * . . . * S H > £ * 5 (H _ 1)a (56) 
is an effective network service curve, with violation probability bounded by 

e'< He(l + (H-1)^^\ . (57) 

More precisely, S net,£ ' satisfies 

Pr{D(t)> inf \A(t-x) + S net ' £ '(x)}\ > 1-e'. (58) 

The bounds of this network service curve deteriorate with the number of nodes H, but, different from 
Theorem H, the bounds are not dependent on t. Rather the bounds depend on a time scale T as used in 



Eqn. (|54|). A key issue, which is not addressed in this paper, relates to establishing T for an arbitrary node 
in the network. 

Proof. The proof is analogous to the proof of Theorem ||, and proceeds in the same three steps. 

Step 1: Uniform probabilistic bounds on intervals of length £. Suppose that S £ is a nondecreasing effective 
service curve satisfying Eqn. (54), and let £ > 0. Fix a > 0, set Xj = t — I + ja, and consider the events 



E j = {D(x j )> inf {A(xj -y)+S £ (y)}\ , j = 0,...,n-l, 
I !/e[o,T] J 



(59) 
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where n = \t/a\. If x € [xj,Xj + \) and the event Ej occurs, then a computation analogous to Eqn. < j40| ) 
shows that 



D(x) > inf {A(x -y) + (S £ * S a (y)) } . 

y€[0,T+a} 



(60) 



We conclude as in Eqs. (fid])-© that 

Prjvxe [t-£,t] :D(x) > nrf - y) + {S £ * 5 a ) (y)} j > Pr{ f] Ej} (61) 



0<j<n 



> 1-e 



2: A deterministic argument. A computation analogous to Eqs. (W6J)-(48) shows that 



Vx G [t — (H — h), t] : D h (x)> inf \A h (x - y) + (S h ' £ * 5 a ) (y)\ h < H, 

y<=[0,T+a] 



h = H 



implies 



D(t)> inf {A(t - x) + S net ' £ ' (x)} . 

xe[0,H(T+a)] 



Step 3: Conclusion. Combining Steps 1 and 2, we obtain 

Pr{D(t)> inf {A(t - x) + S net ' 6 ' (x)}\ > Pr{ Eqn. (63) is satisfied) 

xe[0,H(T+a)} 



H-l r 



> i-^i + E 

> 1-e'. 



h=i 



(H—h)T 



(62) 



(63) 



(64) 

(65) 

(66) 
(67) 



Here, Eqn. (65) follows from Step 2, and Eqn. (pq) follows from the assumptions by choosing th = (H—hA-l) 
forh = 1,...,H- 1 in Step 1. □ 



4 Statistical Calculus with Adaptive Service Guarantees 

We next define a class of effective service curves where the range of the infimum is bounded independently 
of time, and then give conditions under which these service curves are also effective service curves in the 



sense of Eqn. ([15J). The resulting effective service curves are valid without adding assumptions on a specific 
arrival distribution or service discipline. Within this context, we obtain an effective network service curve, 
where the convolution formula has a similarly simple form as in the deterministic network calculus. 

4.1 (Deterministic) Adaptive Service Curves 

We define a modified convolution operator by setting, for any t < t, 

A* to g(t) = mini g(t- t ), B (t ) + inf {Afo, t - r) + g(r)}} . (68) 

^ T<t — tn J 
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Figure 2: Illustration for the modified convolution operator. The operator *t uses the backlog at time to and the arrivals in the 
interval [to , t] . 



The essential property of this modified operator is that the range over which the infimum is taken is limited 
to the interval [to, t]. Note that the function A * to g(t) depends on the backlog at time to as well as on the 
arrivals in the interval [to , t] . It can be written equivalently as 

A* to g{t) = mini g{t- t ), jnf {A(t - r) + g(r)} - D(t )\ . (69) 

The usual convolution operator is recovered by setting to = 0. 

We now reconsider the definition of a service curve in a deterministic regime. We introduce a revised 
definition of a (deterministic) service curve, which is presented in [III [I4p, and is referred to as adaptive 
service curve in A (minimum) adaptive service curve is defined as a function S which specifies a lower 
bound on the service given to a flow such that, for all t, to > 0, with to < t, 

D(t ,t)>A* t0 S(t). (70) 

A maximum adaptive service curve can be defined accordingly.^] Eqn. ( f70| ) is equivalent to requiring that S 
satisfies Eqn. (||) for the time-shifted arrivals and departures 

A(x) = B(t ) + A{to,t + x) , D(x) = D(t ,t + x) . (71) 

Figure || illustrates the time-shifted arrivals. Many service curves with applications in packet networks, such 
as shapers, schedulers with delay guarantees, and rate-controlled schedulers such as GPS, can be expressed 
in terms of adaptive service curves. By setting to = 0, on e can see that each adaptive service curve is a 
service curve. However, the converse does not hold 

We next define a (minimum) l-adaptive service curve, denoted by S , as a function for which Eqn. (7C) 
is satisfied whenever t — to < I- If i = oo, we obtain an adaptive service curve, and drop the superscript 
in the notation. The difference between a service curve according to Eqn. (||) and an ^-adaptive service 
curve is that the former involves arrivals over the entire interval [0,t], while the latter uses information 

3 We note that the adaptive service curve in [^] is more general and is defined using D(to,t) > min|/(t — to),B(to) + 
inf T < t _ to [A(to, t — t) + g(r)}j . In our context we set / = g. 



11 



about arrivals and departures in intervals [to, t] whose length does not depend on t. Performing a time shift 
as in Eqn. (71) and applying Theorem |2| shows that the convolution of ^-adaptive service curves yields an 



^-adaptive network service curve. 

The following lemma shows that for £ sufficiently large, but finite, an ^-adaptive service curve is a 
service curve in the sense of Eqn. <JSj> . In particular, the conclusions of Theorems [j] and ^| hold for such 
service curves. 

Lemma 1 Suppose that the arrival function A of a flow has arrival envelope A*. Let S e be an (.-adaptive 
service curve. If 

3t G [0,<| : A*(t) < S\t) , (72) 

then S 1 = is an adaptive service curve for intervals of arbitrary length. In particular, S satisfies Eqn. (^) 
for all t > 0. 

The proof of the lemma is given in the appendix. 
4.2 Effective Adaptive Service Curves 

Next we introduce a probabilistic version of the ^-adaptive service curve. We define an effective (-adaptive 
service curve to be a nonnegative function S e ' e such that 

Pr{D(t Q ,t) >A* to S l > e (t)} >l-e (73) 

for all £q , i > with t — to < £. If £ = oo, we call the resulting function an effective adaptive service 



curve, and drop the superscript. Note that the infimum in the convolution on the right hand side of Eqn. < j73| ) 
ranges over an interval of length at most £. With this bound on the range of the infimum, we derive the 
following effective network service curve. Technically, £ plays a similar role as the bound T on the range of 



the convolution in Eqn. ( 54 ) 



Theorem 6 Concatenation of Effective ^-Adaptive Service Curves. Consider a flow passing through 
nodes numbered h = 1, . . . H, and assume that, at each node, an effective l-adaptive service curve is given 
by a nondecreasing function S h > > Sh . Then the function 

s netU' = glAe „ _ ^ gHU * 5{H _ 1)a (t) (74) 

is an effective £-adaptive network service curve for any choice of a > 0, with violation probability bounded 
by 

e' <e( 1 + (H-1) 



(75) 

Proof. We need to show that, for any t$, t with t — t$ < £ and any choice of the parameter a, we have 

Pr{D(t , t) > A * t0 s netAH£t/a {t)} > 1 - e' . (76) 



Performing a time shift as in Eqn. <J71[), we may assume without loss of generality that to = and t G [0, £]. 
The claim now follows immediately from Theorem ^. 
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□ 

Even though the concatenation formula in Theorem |6] results in a significant improvement over Theo- 
rem ^ a drawback of Theorem ^ is that the construction of the network service curve results in a degradation 
of the violation probability e' and introduces a time shift <W_i) a , which grow significantly when £ and H 
become large. To avoid this successive degradation of the service guarantees, we further strengthen the 
effective service curve. We define a strong effective adaptive service curve for intervals of length I to be a 
function T £,e which satisfies for any interval 1( of length I, 

Pr{V[t ,t] C h : D(t ,t) > A * to T^{t)} >l-e. (77) 

This definition differs from the definition of an effective service curve in Eqn. ([TJ|) in two ways: it uses 
the modified convolution operator, and it provides lower bounds on the departures simultaneously in all 
subintervals of an interval Ii. 

With the strong effective adaptive network service curve, we obtain a probabilistic version of a network 
service curve, with a similar concatenation formula as in the deterministic calculus. This is the content of 
the following theorem. 

Theorem 7 Concatenation of Strong Effective Adaptive Service Curves. Consider a flow that passes 
through H network nodes in series. Assume that the functions T h ^' £ define strong effective adaptive service 
curves for intervals of length I at each node (h = 1, . . . , H). Then 

T net,£,He^ = jlU ^ ^ T H ' £ ' £ (t) (78) 

is a strong effective adaptive service curve for intervals of length t. 

Note the similarity of the convolution formula in Eqn. ([7J) with the corresponding expression in the 
deterministic calculus. Thus, in the statistical calculus, obtaining a statistical end-to-end service curve via 
a simple convolution operation comes at the price of significant modifications to the definition of a service 
curve. 

Proof. We need to show that T net,l,He satisfies for any interval Ii of length £ 

Pr{V[t ,t] C h : D(t ,t) > A * to T net > e > Hs (t)} >1-He. (79) 
The argument closely follows Steps 2 and 3 from the proof of Theorem |j. If, for a particular sample path, 

V[i 0) x] Cl £ ,Vh = l,...,H: D h (t ,x) > A h * to T h ^ e (x) , (80) 
then, for any fixed [to, t] C I^, the time-shifted arrivals and departures defined by Eqn. (71 ) satisfy 

Vx<t-t , Vh = l,...,H: D h {x) > A h *T hAe {x) . (81) 
By Step 2 of proof of Theorem |], this implies 

D(t) > A * (T 1 '*' 6 * ... * T HA£ ) (t) . (82) 
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Reversing the time shift and using that [to, t] C Ii was arbitrary, we arrive at 

V[to, t] C /, : D(t) > A * to (T 1 ^ 6 * ... * T^> £ ) (t) . (83) 

We conclude that 

Pr{V[t ,t] C I< : D(io,i) > A * io ^ e (i)} (84) 

>Pr{V[i ,x] C I t , Vh = l,...H: D h (t ,x) > A h * to T h ^ e (x)} (85) 

>1-He. (86) 



The first inequality follows from the definition of T net,e ' He and the fact that Eqn. ( |80| ) implies Eqn. (83), 
and the second inequality uses the defining property of strong effective ^-adaptive service curves. □ 



A comparison of the definition of the strong effective adaptive service curve in Eqn. ( |77| ) with Eqn. ( |73| ) 
shows that a strong effective adaptive service curve is an effective ^-adaptive service curve which provides 
service guarantees simultaneously on all subintervals of an interval of length L A comparison of Theorem [7] 
with Theorems Q |], and || shows that the more stringent strong effective adaptive service curve expresses 
the statistical calculus more concisely. Therefore, unless additional assumptions are made on the arrival 
processes and the service curves, the network calculus with strong effective adaptive service curves offers 
the preferred framework. 

Our next result shows how to construct a strong effective adaptive service curve from an effective adap- 
tive service curve. The lemma indicates that the choice of working with a strong effective adaptive service 
curve rather than an effective adaptive service curve is purely a matter of technical convenience. 

Lemma 2 If S i,e is a nondecreasing function which defines an effective i-adaptive service curve for a flow, 
then, for any choice ofa>0, the function 

T e > £ ' = S e ' £ * 5 a (87) 
is a strong effective service curve for intervals of length t, with violation probability given by 

e' = \2£/a] 2 e/2 . (88) 



Proof. We will show that for any interval Ie of length £, 



V[t ,t]CI e : Pr{D(t ,t)>A* t0 S^(t)}>l-e (89) 

implies 

Pr{V[to,t] C I t : D(t ,t) > A * to T^'(t)} > 1 - e' , (90) 

where e' and T e ' £ ' are as given in the statement of the lemma. By performing a suitable time shift as in 
Eqn. (|7l|), we may assume without loss of generality that Ig = [0, £]. 

The strategy is similar to the construction of strong effective envelopes from effective envelopes in [Q], 
and uses the same techniques as the first step in the proof of Theorem ^ We first use the fact that the de- 
partures satisfy the positivity assumption (Al) to translate service guarantees given on a subinterval into a 
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service guarantee on a longer interval. In the second step, we establish probabilistic bounds for the depar- 
tures simultaneously in a finite number of subintervals ly of Ig, and then bound the departures in general 
subintervals of Ig from below in terms of the departures in the Iij . 

Step 1: A property of the modified convolution. Let g be a nondecreasing function, let [t\, t 2 ] C [to,t], and 
a>(t-t Q )- (t 2 - h). Then 

D{h,t 2 ) >A* tx g(t 2 ) (91) 

implies 

D(t Q ,t) >A* t0 {g*S a )(t) . (92) 
To see this, note that Eqn. (^Tj) implies that either 

D(t u t2)>g{t2-h), (93) 

or 

D(h,t 2 ) > B(h)+ inf {A(t x ,T) + g{t 2 -T)} . (94) 

re[ti,t 2 ] 

If Eqn. @ holds, then 

D(t Q ,t) > D(t u t 2 ) > g(t 2 -h)>g* 5 a {t - t ) > A * to {g * 5 a ){t) , (95) 

proving Eqn. (^2|) in this case. We have used that g is nondecreasing in the last inequality. If Eqn (Q) holds, 
then 

D(to,t) > D(t ,h) + B(h) + inf {Afarf+gfa-r)} (96) 

Te[ti,t 2 ] 

= B(t )+ inf {A(t ,T)+g(t 2 -T)} (97) 

re[ti,*2] 

> B(t )+ inf {A(t ,T) + {g*S a )(t 2 -T)} (98) 

re[t ,t] 

> A* to {g*S a )(t), (99) 



which proves Eqn. ( |92[ ) in the second case. In Eqn. (|96J) we have used Eqn. (|94J). In Eqn. (p7|), we have 
used that D(to, t\) + B{t\) = B(to) + j4(to, *i) and taken A(to, h) under the infimum. Eqn. (98) uses the 
monotonicity of g and extends the range of the infimum. 

Step 2: Uniform probabilistic bounds on 1^. Fix a > 0, set X{ = i a/2, and consider the intervals 

hj = [xi, Xj] , < i < j < n , (100) 
where n = \2£/a] is the smallest integer no less than 2£/a. Consider the events 

E i:j := {D{ Xi , Xj ) > A * Xi S e ' £ { Xj )} . (101) 

Let [to, t] C [0, £} be arbitrary, and choose 1^ C [to,t] be as large as possible. If Eij occurs, we apply Step 1 
with t\ = Xi and t 2 = Xj, and use that (xi — to) + (t — Xj) < a to see that 

D(t)>A* t0 (S l > £ *5 a )(t). (102) 
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It follows that 



Pr{V[t ,t] C [0,1] : D(t ,t) > A * t() (S £ ' £ * 5 a ) (t)} 

>Pr{ p| Eij} (103) 



0<i<j'<n 
,2 



> 1 - , (104) 



as claimed. Here, Eqn. (103) uses Step 2, and Eqn. (104) uses the definition of S i,£ . □ 



4.3 Recovering an effective service curve from effective adaptive service curves 

We next show that the adaptive versions of the effective service curve can yield effective service service 
curves in their original definition. This, however, requires us to add appropriate assumptions on the traffic at 
a node. The following lemma gives a sufficient conditions for an effective ^-adaptive curve to be an effective 
service curve in the sense of Eqn. (|i~5|). Combining Theorem ^ with Lemma |3| yields an effective network 
service curve, which by Theorem |3| guarantees probabilistic bounds on output, backlog, and delay. 

Lemma 3 Let S^ ,£ be a nondecreasing function which defines an effective (-adaptive service curve for a 
flow with arrival process A, and an 

1- V 

Pr{3t € [t — £,t] : B(t ) = 0} > 1 - e x (105) 

for all t > 0, then, for any choice ofa>0, S £ ^l a+£l = S t,£ * 5 a is an effective adaptive service curve 
for intervals of arbitrary length, with violation probability eij a + S\. In particular, 

Pr{D(t) > A * S l ' £ * 5 a (t)} > 1 - {el/a + e x ) (106) 

for all t > 0. 

2. If the arrival process A has arrival envelope A* and 

Pr{B{t) < S e > £ {£) - A*{£)} > 1 - e x , (107) 

for all t > 0, then S £+£1 = S e,£ is an effective adaptive service curve for intervals of arbitrary length, 
with violation probability e + £\. In particular, 

Pr{D(t) > A * S £ ' £ (t)} > 1 - (e + ei) , (108) 

for all t > 0. 

The lemma should be compared with Lemma[TJ, as both provide sufficient conditions under which service 
guarantees on intervals of a given finite length imply service guarantees on intervals of arbitrary length. 
While the condition on I in Eqn. ([72|) involves only the deterministic arrival envelope and the service curve, 



Eqs. (|105j) and ( |107| ) represent additional assumptions on the backlog process. This points out a fundamental 



difference between the deterministic and the statistical network calculus. 
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Proof. The proof consists of three steps. If Eqn. (107) holds, the first step can be omitted. In the first 
step, we modify a given effective ^-adaptive service curve to give uniform probabilistic lower bounds on the 
departure of all intervals of the form [to, t], where t is fixed and to G [t — £, t]. This is analogous to the first 
step in the proof of Theorem |4[ The second step contains a deterministic argument. We conclude with a 
probabilistic estimate. 

Step 1: Uniform probabilistic bounds. Suppose that S ,E is a nondecreasing effective ^-adaptive service 
curve, that is, for any f > 0, 

Vt e[t--M]: Pr{D(t ,t) > A* to S £ ' e (t)} > 1 -e . (109) 

We will show that then, for any choice of a > 0, 

Pr{Vt G [t-£,t] :D(t ,t) > A * to S l > £ {t - a)} > I -el/ a. (110) 

To see this, assume without loss of generality that t = £, and consider the events 

Ej = {D{xj,t) > A* Xj S e ' E (t)} , 0<i<n. (Ill) 

If Ej occurs, we have for x € [xj-i, Xj) by the first step of the proof of Lemma || (with to = x,t\ = Xj, 
t 2 = t), that 

D(x,t)>A* Xj (S e > £ *5 a )(t). (112) 

It follows that 

Pr{Vt G [0,£] : D(t) > A * to S £ ' e (t - a)} 

= Pr{ f] E^ (113) 

0<i<n 

>l-ne, (114) 



which proves Eqn. ( |1 10| ) in the case t = £. 

Step 2: Deterministic argument. Fix t > 0, and suppose that for a particular sample path, we have 

Vx G [t - £, t] : D(x, t)>A * x T e ' £ (t) , (1 15) 

and either 

1. 3t G [t-£,t] : B(t ) =0, or (116) 

2. B(t -£)< S e ' £ {£) - A*(£) , where A* is an arrival envelope. (1 17) 

In the first case, we can set x = to in Eqn. (|115|) to obtain 



D(t)> inf {A(t-r) +S e ' £ {r)}. (118) 

T<t — to 



In the second case, we note that from Eqn. ( |1 17| ) it follows that 

B(t -£) + inf {A(t -£,t-r) + S 1 ' £ (t)} < S^ £ {£) - A*{£) + A(t - £, t) < S l ' £ (£) , (119) 

T<1 
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which implies that 



A * t -e (*) = B(t -£) + inf {A(t - £, r) + 5 & (r)} . 



(120) 



Inserting this into Eqn. ( |115| ) with a; = i — yields again Eqn. ( |1 18| ). 

Step J: Probabilistic estimate. If Eqn. ( |105[ ) holds, we use Step 2 to see that 

Pr{D(t)>iBjFU(t-r) + D(r)}} 

> Pr | Vx € [t - t] : D(x, t)>A* x T e ' e (t), and 3t Q e[t-£,t\: B(t ) = } (121) 

> 1 - (el/ a + e{) , (122) 



where we have used the result of Step 2 in the second line. If in Eqn. ( |107| ) holds, we have by Step 2 

Pr{D(t)>M{A(t-r) + D(r)}} 

> Pr { D(i - i) > A * t -e T e ' e (t), and 5(t - I) < S l > e (£) - A*(£) } (123) 
>l-(e + £i), (124) 

where we have used the definition of S e,e in the second line. 



□ 



Note that Eqs. ( |122| ) and (|124|) supply time-independent bounds on the range of the convolution, of the 



form given in Eqn. (|54|). A similar, but simpler result holds for strong effective ^-adaptive service curves: 
Lemma 4 Given a flow with arrival process A, and a strong effective adaptive service curve T^ ,£ on inter- 



vals of length £. Assume that for every t > 0, either Eqn. ( 105) or or Eqn. ( 107 ) is satisfied. Then, for any 
t > and any t\ < t, 

Pr{D(h,t) > A * tl T £ ' e (t)} > 1 - (e + £l ) . (125) 
In particular, for t\ = 0, S e+£l = T^ ,£ i,? a« effective service curve in the sense of Eqn. (|73[). 

Proof. We need to show that under the assumptions of the lemma, we have for any t > and any t\ < t 

Pr{D(t u t) > A * tl T e ' £ (t)} > 1 - (e + £l ) . (126) 

By considering time-shifted arrivals and departures as in Eqn. (^1|), we may assume without loss of gener- 
ality that t\ = 0. The first step in the proof of Lemma |3] shows that 

Pr{D(t)>mUA(t-r) + D(r)}} 



V[x, y]c[t- £, t] : D(x, y)>A* x T e > s (x), 
>Pr{ and { either 3t £ [t — £,t] : B(t ) = 
or B(t-£) < T e < £ (£) - A*(£)} 

>l-(e + ei), 



as claimed. 



(127) 

(128) 

□ 
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5 Conclusions 



We have presented a network calculus with probabilistic service guarantees where arrivals to the network 
satisfy a deterministic arrival bound. We have introduced the notion of effective service curves as a prob- 
abilistic bound on the service received by individual flows in a network. We have shown that some key 
results from the deterministic network calculus can be carried over to the statistical framework by inserting 
appropriate probabilistic arguments. 

We showed that the deterministic bounds on output, delay, and backlog from Theorem |l| have corre- 
sponding formulations in the statistical calculus (Theorem ||). We have extended the concatenation formula 
of Theorem || for network service curves to a statistical setting (Theorems |], ||, ^, and 0). We showed 
that a modified effective service curve, called strong effective adaptive service curve yields the simplest 
concatenation formula. In order to connect the different notions of effective service curves, we have made 
an additional assumption on the backlog in Lemmas |5| and |]. The results in this paper showed that a multi- 
node version of the statistical network calculus requires us to make assumptions that limit the range of the 
convolution operation when concatenating effective service curves. Such limits on a 'maximum relevant 
time scale', can follow from assumptions on the traffic load (as in Theorems ||, Lemma || and Lemma 
or from appropriately modified service curves. While the question is open whether one can dispense with 
these additional assumptions, we have made an attempt to justify the need for them. 
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APPENDIX 



A Proof of Lemma J] 

Let S be an ^-adaptive service curve. We need to show that 

D(t 1; t)>A Hl S e (t) 



(129) 



holds for all t, t\ > with t\ < t. By considering the time-shifted arrivals and departures as in Eqn. (71), 
we may assume without loss of generality that t\ = 0. 

Consider intervals 1% = [k£, (k + 1)£], where k > is an integer. We will show by induction, that for 
any integer k > 0, 

rk 



Vt £ I£ : D(t) >A* S*(t) 



(130) 



[0,4 we see that Eqn. (13C) 



Applying the definition of an ^-adaptive network service curve with I? 
clearly holds for k = 0. 

For the inductive step, suppose that Eqn. ( |130| ) holds for some integer k > 0. Fix t £ and let 

to = t — £ £ Ip. By the inductive assumption, D(to) > A * S (to). Eqn. (f7(i|) says that either 



or 



D(to,t) > S £ (t-t ) 



D(t ,t) >B(t )+ inf {A(t-t ,t-T) + S e (T)} . 

r<t— £q 



If Eqn. ( |131| ) holds, then 

D(t) 



= D(t ,t) + D(t ) 

> S e {t - t ) + inf {A(t - r) + 5 £ (r)} 



T<t 



(131) 
(132) 

(133) 
(134) 



> S e (t - t ) - A*(t - to) + mf {A(t - t) + 5 £ (r)} 



(135) 

> A + fifft). (136) 

In Eqn. ( 134[ ), we have used Eqn. (131) and the inductive assumption. In Eqn. (135), we have used that 
A(to — r,t — t) < A*(t — to) and pulled A*(t — to) out of the infimum. In Eqn. (136), we have inserted 
t — to = £, used the assumption that A*(£) < S £ (£), and extended the range of the infimum. 



If Eqn. (|132|) holds, then 



D(t) 



= D(t ) + D(t - t ) 

> A(t )+ inf {A(t ,t-T) + S e (r)} 

T<.t—t{) 

= mf {A(t - r) + S e (r)} 

> A* S e {t) . 



(137) 
(138) 

(139) 

(140) 



In Eqn. ( |T38| ), we have used Eqn. ( |132| ), and the fact that D(t ) + B(t ) = A(t ). In Eqn. ( p9| ), we have 
taken A(to) under the infimum and used that A(to) + A(to,t — r) = A(t — t). In Eqn. ( |l4fj| ), we have 
extended the range of the infimum and used the definition of the convolution. 
Since t £ was arbitrary, this proves the inductive step, and the lemma. 
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